# Logstash WMI plugin logstash-input-wmi error

**URL:** <https://discuss.elastic.co/t/logstash-wmi-plugin-logstash-input-wmi-error/319163>\
**Category:** Logstash\
**Created:** [November 17, 2022, 10:07am UTC](https://discuss.elastic.co/t/logstash-wmi-plugin-logstash-input-wmi-error/319163 "2022-11-17T10:07:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![houwenguang](https://avatars.discourse-cdn.com/v4/letter/h/3bc359/32.png) [@houwenguang](https://discuss.elastic.co/u/houwenguang)\
**Post date:** [November 17, 2022, 10:07am UTC](https://discuss.elastic.co/t/logstash-wmi-plugin-logstash-input-wmi-error/319163/1 "2022-11-17T10:07:12Z")

</div>

- Hi, I use logstash to collect wmi remotely on linux.  
input {

# prueba local

input {  
wmi {  
query =\> "select \* from Win32\_Process"  
host =\> "192.168.146.203"  
user =\> "Administrator"  
password =\> "1909"  
}  
}

output {  
stdout {}  
}  
This is the error i have, I try to solve by diferent soluctions and 1 can't  
[2022-11-17T16:32:15,981][INFO][logstash.javapipeline][main] Pipeline terminated {"pipeline.id"=\>"main"}  
warning: thread "[main]-pipeline-manager" terminated with exception (report\_on\_exception is true):  
LoadError: load error: win32ole/win32ole -- java.lang.UnsatisfiedLinkError: /elk/logstash/logstash-8.5.1/vendor/bundle/jruby/2.6.0/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: /elk/logstash/logstash-8.5.1/vendor/bundle/jruby/2.6.0/gems/jruby-win32ole-0.8.5/lib/racob-x64.dll: 无效的 ELF 头  
require at org/jruby/RubyKernel.java:1017  
 at /elk/logstash/logstash-8.5.1/vendor/bundle/jruby/2.6.0/gems/jruby-win32ole-0.8.5/lib/jruby-win32ole.rb:10  
require at org/jruby/RubyKernel.java:1017  
register at /elk/logstash/logstash-8.5.1/vendor/bundle/jruby/2.6.0/gems/logstash-input-wmi-3.0.4-java/lib/logstash/inputs/wmi.rb:53  
register\_plugins at /elk/logstash/logstash-8.5.1/logstash-core/lib/logstash/java\_pipeline.rb:234  
each at org/jruby/RubyArray.java:1865  
register\_plugins at /elk/logstash/logstash-8.5.1/logstash-core/lib/logstash/java\_pipeline.rb:233  
start\_inputs at /elk/logstash/logstash-8.5.1/logstash-core/lib/logstash/java\_pipeline.rb:392  
start\_workers at /elk/logstash/logstash-8.5.1/logstash-core/lib/logstash/java\_pipeline.rb:317  
run at /elk/logstash/logstash-8.5.1/logstash-core/lib/logstash/java\_pipeline.rb:191  
start at /elk/logstash/logstash-8.5.1/logstash-core/lib/logstash/java\_pipeline.rb:143  
[2022-11-17T16:32:15,989][ERROR][logstash.agent] Failed to execute action {:id=\>:main, :action\_type=\>LogStash::ConvergeResult::FailedAction, :message=\>"Could not execute action: PipelineAction::Create, action\_result: false", :backtrace=\>nil}

Thank you  
Regards  
Ana

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 15, 2022, 10:08am UTC](https://discuss.elastic.co/t/logstash-wmi-plugin-logstash-input-wmi-error/319163/2 "2022-12-15T10:08:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.